Question

我有nsis源设置ajax文件并清理Internet Explorer因为同一个人使用文件dll阻止我

当我去virustotal的文件我得到病毒我不知道问题可以在哪里帮助我

这是来源

; saudivoice NSIS Installer Script File
; khaild Winston <babh532@gmail.com>
;--------------------------------
;Include some predefined NSIS libraries

  !include "WinMessages.nsh"

; --------------------
XPStyle on


; LANG: 1033
LangString LSTR_43 1033 "Show &details"
LangString LSTR_44 1033 Completed
; --------------------
;General

  ;Name and file
  Name "SaudiVoice"

  ;Default installation folder
  InstallDir "$PROGRAMFILES\SaudiVoice"

; --------------------
; PAGES: 3

; Page 0
Page license /ENABLECANCEL
  LicenseText "Welcome to the Saudivoice Voice Setup." Next
  LicenseData [LICENSE].txt

; Page 1
Page instfiles
  CompletedText $(LSTR_44)    ;  Completed
  DetailsButtonText $(LSTR_43)    ;  "Show &details"

/*
; Page 2
Page COMPLETED
*/
; --------------------


; --------------------
; SECTIONS: 1

;Installer Sections

Section "Install saudivoice" 

  SetOutPath "$INSTDIR"

  ; Copy all of the required files (note the /r switch to recursively copy                     directories)
    File chat5.ocx
    File chat5.dll
    File chat5.inf
    File setup.bat
    File IMSVoiceStarter.exe
    File npIMSChatStarter.dll
    File Readme.htm
    ; Register the COM server
    ClearErrors
    RegDLL $INSTDIR\chat5.ocx
    RegDLL $INSTDIR\npIMSChatStarter.dll
    Exec $INSTDIR\setup.bat
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall14\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    Exec "$PROGRAMFILES\KSAChatControl2017\2.11.0.0\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    CreateDirectory $SMPROGRAMS\SaudiVoice
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Read Me.lnk" $INSTDIR\Readme.htm
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk"             $INSTDIR\Uninstall.exe
    WriteRegStr HKLM       Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayName       "SaudiVoice 1.0.0.1"
    WriteRegStr HKLM       Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayVersion 1.0.0.1
    WriteRegStr HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice UninstallString $\"$INSTDIR\Uninstall.exe$\"
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoModify 1
    DeleteRegKey HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoRepair 1
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ModuleUsage"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDlls"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
    DeleteRegKey HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges"
    DeleteRegKey HKEY_CURRENT_USER "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges"
    DeleteRegKey HKEY_USERS ".DEFAULT\Software\Microsoft\Windows Firewall"
    WriteUninstaller $INSTDIR\Uninstall.exe ;  $INSTDIR\$INSTDIR\Uninst.exe
  SectionEnd



  ; --------------------
  ;Uninstaller Section

  Section "Uninstall"

    Delete "$INSTDIR\Uninstall.exe"

    ; Unregister the COM server
    UnRegDLL "$INSTDIR\chat5.ocx"
    Delete "$INSTDIR\chat5.ocx"
    Delete "$INSTDIR\chat5.dll"
    Delete "$INSTDIR\chat5.inf"
          Delete "$INSTDIR\IMSVoiceStarter.exe"
    Delete "$INSTDIR\npIMSChatStarter.dll"
    Delete "$INSTDIR\Readme.htm"
    ; Delete all installed files
    RMDir "$INSTDIR"

    ; And registry entries
    DeleteRegKey HKLM       "Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice"
    Delete "$SMPROGRAMS\SaudiVoice\Read Me.lnk"
    Delete  "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk"
    RMDir $SMPROGRAMS\SaudiVoice

  SectionEnd

这是文件

 http://saudidos.com/fix.exe

请帮帮我

Answer 1

VirusTotal results的检测率为2/55，两者是Bkav和Invincea，我会说这些并不是众所周知的公司，这可能是误报。您可以尝试reporting误报......

Answer 2

这不是first time这发生在nsis或某些相关的plugins上。请告知这些公司，或virustotal（“我们分享的信息”一章）也会为您做这件事（只需要一段时间）......

源代码设置有病毒

2 个答案: